ISLAMABAD (UrduPoint / Pakistan Point News – 28 March 2026) A well-organised disinformation campaign has been uncovered, including… Indian And Afghan operators posing as Iranian accounts to aggressively target them Pakistan on social media, especially at a time when the country, along with other friendly countries, was actively engaged in efforts to de-escalate tensions in the region.
The campaign spreads false claims that Pakistan betrayed Iran by allowing Pakistani-flagged ships to transport oil through the Strait of Hormuz to Iran’s enemies, despite Tehran’s trust in Islamabad as a Muslim country.
The campaign began with Afghan accounts. One of the earliest posts appeared on March 26, 2026, from the account @HosseinNejat1 which was created in November 2025 and is listed as being based in Central Asia. The account has undergone one username change and is connected via the Central Asia Android app. It was initially followed by Afghan users.
Similar fabricated posts repeating the same narrative have been made by multiple accounts in Afghanistan, including:
@Army_of_Afghani is connected via the Afghanistan App Store; @fqyrzadh079, connected via the Afghanistan Android app; and @GlobNow34163, based in Afghanistan, connected via the Afghanistan Android app.
Network analysis shows that several propaganda accounts — including the Afghan Guardian (@WakhanIntel), Kabul Frontline (@FrontlineKabul), News File, Islamabad Post, Afghan Defense, Falcon Defense, The Scoop, and Heart of Asia — are run by the same person operating under the name Ahsan Agha, also known as Haider Hashmi (@sHaidarHashmi).
On the Indian side, misinformation has been amplified by accounts with clear Indian origins that have been rebranded to appear Iranian or pro-Iranian. Notable examples include: @INNewx (INN Iran National News), @Timesofiraan (Times of Iran News), which shows multiple location changes from Bihar, India, and previous usernames associated with Indian identities; @MojtabaKhamen (comment by Mojtaba Khamenei), previously operating under the username RahulTi30553541 and the username Rahul Tiwari; @GlobalReportNow presented as Western news an agency; and @AyatollahArafi (commentary by Ayatollah Al-Arifi), who previously went under the username Rob_JGR_FAN and the username Manoj K, are connected via the South Asia Android app.
All accounts show similar suspicious patterns: recent creation or reactivation dates, frequent username changes, and location changes from India Or Afghanistan, and communications through regional Android apps, with similar content posted designed to portray Pakistan as having betrayed Iran.